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CLAIMS 



What is claimed is: 




l\ A high reliability computer system, said system comprising: 
\ a first processing engine (PE); 



5 



\ a first memory accessible by said first PE, containing initialization information 
for Aaid first PE; 
\ a second PE; 

y second memory accessible by said second PE, containing initialization 
10 information for said second PE; 

a third memory accessible by said first PE, said third memory having a location 
for storin Aan enable password for said first PE; 

a fourth memory accessible by said second PE; 

circuitry for switching control of said system from said first PE to said second 
15 PE upon detection of a failure of said first PE; and 

a password passer writing said enable password of said first PE to the fourth 
memory accessible by said second PE. 

2. A high reliability\computer system according to claim 1, wherein said password 
20 passer writes said enVble password of said first PE to said fourth memory at the 

initialization of the system. 

3. A high reliability computer system according to claim 1, wherein said password 
passer writes said enable password of said first PE to said fourth memory every time 

25 said enable password of saidWst PE is changed. 

4. A high reliability computerWstem according to claim 1, wherein said password 
passer writes said enable password of said first PE to said fourth memory in response 
to a command from said second PE. 
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5. A high reliability computer system according to claim 1, wherein password passer 
reads said enable password of said first PE from said first memory and writes said 
enable password to said fourth memory. 



system, said system comprising: 
e by said first PE, containing initialization information 



6. A high reliability computer 
a first PE; 

a first memory accessit 
for said first PE; 

a second PE; 

a second memory accessible by said second PE, containing initialization 
information for said second PI 

circuitry for switching control of said system from said first PE to said second 
PE upon detection of a failure of said first PE; 

a password memory accessible by said first and second PEs, having a location 
for storing an enable password for the system; and 

a password keeper for maintaining said enable password in said password 
memory for said first and second IPEs. 



20 7. A high reliability computer system according to claim 6, wherein said password 
keeper reads said enable password from said first memory and writes said enable 
password to said password memory at the initialization of the system. 
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8. A high reliability computer system according to claim 6, wherein said initialization 
information for said first PE includes instructions for said password keeper to write 
said enable password to said password memory. 
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9. A high reliability computer system according to claim 6, wherein said initialization 
information for said second PE includes instructions for said password keeper to write 
said enable password to said password memory. 

5 10. A high reliability computer system according to claim 6, wherein said password 
keeper writes said enable password to said pa/sword memory every time said enable 
password is changed. 

11. A high reliability computer system according to claim 6, wherein said password 
10 keeper passes said enable password maintained in said password memory to either 

one of said first and second PEs in response to a request therefrom. 

12. A system for providing password protection for a high reliability computer 
system, on a data communications network including a password server having a 

15 database for maintaining an enable password for said high reliability computer 
system, said password server being coupled via an information bus to said high 
reliability computer system, said system comprising: 
a first PE; 

a first memory accessible by said first PE, containing initialization 
20 information for said first PE; 

a second PE; 

a second memory accessible by said second PE, containing initialization 
information for said second PE 

circuitry for switching control of said system from said first PE to said 
25 second PE upon detection of a failure of said first PE; and 

an interface capable of communicating with the password server over 
the information bus, said interface obtaining an enable password from the 
password server in response to a request from either one of said first and 
second PEs. 
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13. A network system according to claim 12, wherein saidjsecond PE authenticates 
incoming users by requesting authentication from said password server. 

5 14. A network system according to claim 12, wherein said first PE obtains said enable 
password from said password server via said interface at the initialization of the 
system. 

15. A network system according to claim 12, wherein said initialization information 
10 for said first PE includes instructions to access and obtain said enable password from 

said password server. 

16. A system for providing password protection for a high reliability computer system 
on a data communications network including a password server having a database for 

15 maintaining an enable password for said high reliability computer system, said 
password server being coupled via an /information bus to said high reliability 
computer system, said system comprising/ 
a first PE; / 

a first memory accessible by said first PE, containing initialization 
20 information for said first PE; 

a first interface for s&id first PE, said first interface capable of 
communicating user authentication requests and responses with the password 
server over the information b,us; 

a second PE; 

25 a second memory accessible by said second PE, containing initialization 

information for said second/PE; 

a second interface for said second PE, said second interface capable of 
communicating user authentication requests and responses with the password 
server over the information bus; and 
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circuitry for switching control of said system from said first PE to said 
second PE upon detection of a failure of said first PE. 



17. A method for operating a high reliability computer/system, said system including 
5 a first PE, a first memory accessible by said first PE, said first memory containing 
initialization information for said first PE and having/a location for storing an enable 
password for said first PE, a second PE, and a second memory accessible by said 
second PE, said second memory containing initialization information for said second 
PE, said method comprising: 
10 writing said enable password of said first PE to a third memory accessible by 

said second PE; and 

switching control of said system from s£id first PE to said second PE upon 
detection of a failure of said first PE. 



15 18. A method according to claim 17, wherein said writing of said enable password of 
said first PE to said third memory is performed/ at the initialization of the system. 
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19. A method according to claim 17, whereinjsaid writing of said enable password of 
said first PE to said third memory is performed every time said enable password of 
said first PE is changed. 
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20. A method according to claim 17, wherein said writing of said enable password of 
said first PE to said third memory is performed in response to a command from said 
second PE. 



21. A method for operating a high reliability 
a first PE, a first memory accessible by said 
initialization information for said first P 



computer system, said system including 
first PE, said first memory containing 
a second PE, and a second memory 
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accessible by said second PE, said second memory containing initialization 
information for said second PE, said method comprising: 

providing a password memory accessible by said first and second PEs, having 
a location for storing an enable password; J 

maintaining said enable password for said first and second PEs in said 
password memory; and 

switching control of said system jfrom said first PE to said second PE upon 
detection of a failure of said first PE. 
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10 22. A method according to claim 21, wherein said maintaining includes: 

reading said enable password frcjm said first memory and writing said enable 
O password to said password memory at the initialization of the system. 



23. A method according to claim 21, wherein said maintaining includes: 

writing said enable password to said password memory every time said enable 
password is changed. 



\* 24. A method according to claim 21, wherein said maintaining includes: 
In writing said enable password to\ said password memory in response to a 

*~ 20 command from said first PE. 
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25. A method according to claim 21, wherein said maintaining includes: 

passing said enable password maintained in said password memory to either 
one of said first and second PEs in response to a request therefrom. 



26. A method for providing password pr< 



system, said system including a first PE, a 
said first memory containing initialization iAformation for said first PE, a second PE, 
a second memory accessible by said second PE, said second memory containing 



tection for a high reliability computer 
irst memory accessible by said first PE, 
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initialization information for said second PE, and circuitry for switching control of 
said system from said first PE to said second PE upon detection of a failure of said 
first PE, said method comprising: / 

sending an enable password for the high reliability computer system for 
5 storage in a database of a server coupled to the high reliability computer system via an 
information bus; j 

providing an interface capable of communicating jvith the password server 
over the information bus; and 

obtaining the enable password from the password server through the interface 
10 in response to a request from either one of the first and second PEs 



C3 27. A method according to claim 26, further comprising authenticating incoming 
*p users by requesting authentication from the password server. 

is / 

Tn 15 28. A method for providing password protection for/ a high reliability computer 

u system, said system including a first PE, a first memory accessible by said first PE, 

^ said first memory containing initialization information /for said first PE, a second PE, 

I- a second memory accessible by said second PE, said second memory containing 

in / 

K g initialization information for said second PE, and circuitry for switching control of 
™ 20 said system from said first PE to said second PE detection of a failure of said 
first PE, said method comprising: 

sending an enable password for the high /reliability computer system for 
storage in a database of a password server coupled to the high reliability computer 
system via an information bus; 
25 communicating user authentication requestis and responses with the password 

server over the information bus via a first interface for the first PE; and 

communicating user authentication requests and responses with the password 
server over the information bus via a second interface for the second PE. 
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29. A program storage device readable by a machine, tangibly embodying a program 
of instructions executable by the machine to perform method steps for operating a 
high reliability computer system, said system including/a first PE, a first memory 
accessible by said first PE, said first memory containing initialization information for 
5 said first PE and having a location for storing an enabl^password for said first PE, a 
second PE, and a second memory accessible by said second PE, said second memory 
containing initialization information for said second PE, said method steps 
comprising: / 

writing said enable password of said first PE jto a third memory accessible by 
10 said second PE; and 

switching control of said system from said/first PE to said second PE upon 
C3 detection of a failure of said first PE. 



5 / 

30. A program storage device according to claim 29, wherein said method step of 
\n 15 writing said enable password of said first PE to said third memory is performed at the 
l~ initialization of the system. ■ 



31. A program storage device according to cl 
writing said enable password of said first PE to 



20 time said enable password of said first PE is cfc nged 



32. A program storage device according to c 
writing said enable password of said first PE 
response to a command from said second PE. 



im 29, wherein said method step of 
said third memory is performed every 



aim 29, wherein said method step of 
to said third memory is performed in 



33. A program storage device readable by a m achine, tangibly embodying a program 
of instructions executable by the machine to perform method steps for operating a 
high reliability computer system, said systeirt including a first PE, a first memory 
accessible by said first PE, said first memory containing initialization information for 
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said first PE, a second PE, and a second memory accessible by said second PE, said 
second memory containing initialization information for said second PE, said method 
steps comprising: j 

providing a password memory accessible by said first and second PEs, having 
5 a location for storing an enable password; j 

maintaining said enable password for said first and second PEs in said 
password memory; and 

switching control of said system from said first PE to said second PE upon 
detection of a failure of said first PE. 
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34. A program storage device according to claim 33, wherein said method step of 
maintaining includes: j 

reading said enable password from said first memory and writing said enable 
password to said password memory at the initialization of the system. 

35. A program storage device according/to claim 33, wherein said method step of 
maintaining includes: 

writing said enable password to said password memory every time said enable 
password is changed. 

36. A program storage device according to claim 33, wherein said method step of 
maintaining includes: 

writing said enable password to said password memory in response to a 
command from said first PE. 



37. A program storage device according to claim 33, wherein said method step of 
maintaining includes: / 

passing said enable password maintained in said password memory to either 
one of said first and second |PEs in response to a request therefrom. 
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38. A program storage device readable by a machine, tangibly embodying a program 
of instructions executable by the machine to perform method steps for/providing 
password protection for a high reliability computer system, said system/including a 

5 first PE, a first memory accessible by said first PE, said first memory containing 
initialization information for said first PE, a second PE, a second memory accessible 
by said second PE, said second memory containing initialization information for said 
second PE, and circuitry for switching control of said system from ^aid first PE to said 
second PE upon detection of a failure of said first PE, said methodysteps comprising: 

10 sending an enable password for the high reliability computer system for 

storage in a database of a password server coupled to the high reliability computer 



system via an information bus; 
£ providing an interface capable of communicating with the password server 

p over the information bus; and 
%15 obtaining the enable password from the password /server through the interface 

in response to a request from either one of the first and second PEs. 



39. A program storage device according to claim 38, wherein said method steps 
i J 

further comprises authenticating incoming users by requesting authentication from the 

? 20 password server. 



40. A program storage device readable by a machine, tangibly embodying a program 
of instructions executable by the machine to ^perform method steps for providing 
password protection for a high reliability computer system, said system including a 
25 first PE, a first memory accessible by said first PE, said first memory containing 
initialization information for said first PE, a^second PE, a second memory accessible 
by said second PE, said second memory containing initialization information for said 
second PE, and circuitry for switching control of said system from said first PE to said 
second PE upon detection of a failure of said first PE, said method steps comprising: 

37 



CISCO-1315 



sending an enable password for the high reliability computer system for 
storage in a database of an authentication, authorization and accounting (AAA) server 
coupled to the high reliability computer system via an information bus; 

communicating user authentication requests and responses with the password 
server over the information bus via a first interface for the first PE; and 

communicating user authentication requests and responses with the password 
server over the information bus via a second interface for the second PE. 
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